attribute Token

The attribute token contains information from the
file vnode.

The attribute token usually accompanies a path token.
The attribute token is produced during path searches. If
a path-search error occurs, there is no vnode available to obtain the necessary
file information. Therefore, the attribute token is not
included as part of the audit record. The praudit -x command
shows the fields of the attribute token: